ClawHub Skill Guide — Scanner Compliance

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent documentation-only skill, with user-directed examples for publishing skills and manually reviewing configuration changes.

Safe to install as a guide, but do not blindly run the example CLI commands or apply generated gateway configuration. Review any skill you create with it, verify declared credentials and dependencies, and manually check config changes before publishing or applying them.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user runs these commands, they may publish or update a skill under their ClawHub account.

Why it was flagged

The guide includes user-directed CLI commands that publish content to ClawHub using the user's authenticated account. This is central to the skill's stated publishing purpose and is not automatic.

Skill content
npx clawhub publish ./my-skill \
  --slug my-skill \
  --name "My Skill Display Name"
Recommendation

Review the skill directory, slug, version, changelog, and tags before running publish commands.

NoteHigh Confidence
ASI08: Cascading Failures
What this means

Incorrectly applying generated gateway configuration could disrupt existing agents or bindings.

Why it was flagged

The template discusses gateway configuration changes that could affect routing or existing agents if applied incorrectly, but it explicitly frames them as manually reviewed templates.

Skill content
**Important:** `agents.list` and `bindings` are arrays — `config.patch` replaces
them entirely. Include ALL existing agents/bindings plus the new entries.
Recommendation

Treat generated config as an example only, back up existing configuration, and manually verify all existing agents and bindings are preserved.